Nonmonotonic Logics and Semantics 

Daniel Lehmann 
Institute of Computer Science, 
Hebrew University, 
Jerusalem 91904, Israel 
lehmann@cs.huji.ac.il 



Abstract 

Tarski gave a general semantics for deductive reasoning: a for- 
mula a may be deduced from a set A of formulas iff a holds in all 
models in which each of the elements of A holds. A more liberal se- 
mantics has been considered: a formula a may be deduced from a 
set A of formulas iff a holds in all of the preferred models in which 
all the elements of A hold. Shoham proposed that the notion of pre- 
ferred models be defined by a partial ordering on the models of the 
underlying language. A more general semantics is described in this 
paper, based on a set of natural properties of choice functions. This 
semantics is here shown to be equivalent to a semantics based on com- 
paring the relative importance of sets of models, by what amounts to a 
qualitative probability measure. The consequence operations defined 
by the equivalent semantics are then characterized by a weakening of 
Tarski 's properties in which the monotonicity requirement is replaced 
by three weaker conditions. Classical propositional connectives are 
characterized by natural introduction-elimination rules in a nonmono- 
tonic setting. Even in the nonmonotonic setting, one obtains classical 
propositional logic, thus showing that monotonicity is not required to 
justify classical propositional connectives. 



*This work was partially supported by the Jean and Helene Alfassa fund for research 
in Artificial Intelligence and by grant 136/94-1 of the Israel Science Foundation on "New 
Perspectives on Nonmonotonic Reasoning" . 
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1 Introduction 



This paper is intended for logicians. It builds on the insights, motivations 
and techniques developed by researchers in Knowledge Representation and 
Artificial Intelligence, but its purpose is to present the topic of (Al-type) 
nonmonotonic deduction (or induction) to logicians. It is not claimed that 
the results of this paper will prove useful to AI practice. It uses the language 
of Mathematics (theorems and proofs) to study a form of deduction that is 
more general than the one used in Mathematics. A logician interested only 
in the (monotonic) kind of deduction used in Mathematics should not read 
further. 

A semantics for nonmonotonic reasoning, more general than Shoham's p? 



will be presented. This semantics is closely related to, but generalizes, con- 
cepts developed by the Social Choice community. In this semantic framework 
one may define the family of preferential operations of [19] in a way that does 
not assume a pre-existing monotonic logic or connectives. Connectives may 
then be defined and studied by introduction-elimination rules as is done in 
monotonic logics. 



2 Monotonic Logics 

In the thirties, Tarski made a number of fundamental advances in the study 
of mathematical logic: he proposed a semantics for logical deduction (see in 
particular j|0], p. 127]): a formula a follows from a set A of formulas iff a 
holds in all models in which all the elements of A hold. These ideas were first 
expounded in BO, RH] (English translation in HI] , Chapters 3 and 5 respec- 



tively). He characterized the consequence operations that may be defined 
by such a semantics as those operations that satisfy Inclusion, Idempotence 
and Monotonicity, as in Theorem |I[ That theorem, however, does not seem 
to appear in Tarski's work, since he deals from the start only with compact 
operations. After having settled the question of what is deduction, or what 
is a logic, without being tied to any specific logical calculus, he was able to 
deal with the meaning of connectives, one at a time. This section contains a 
sketch of some results concerning monotonic deductive operations, that we 
are interested in generalizing to nonmonotonic operations. 

r r 

Let us assume a non-empty set (language) £ and a function C : 2^ — ► 2^ 
are given. Nothing is assumed about the language. Assume M. is a set (of 
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models), about which no assumption is made, and \= C M. x C is a (satisfac- 
tion) binary relation. For any set A C £, we shall denote by A or by Mod(A) 
the set of all models that satisfy all elements of A: 

A = Mod(A) = {x G M | x \= a, Va G A}. 

For typographical reasons we shall use both notations, sometimes even in the 
same formula. For any set of models X C M, we shall denote by X the set 
of all formulas that are satisfied in all elements of X: 

X= {a G C | x \= a,\/x G X}. 

The following are easily proven, for any A, B C C, X, Y C M.: they amount 
to the fact that the operations X i— > X and A i— > A form a Galois connection. 



A C A , X CX 

aXTb = adb , xur = In7 

ACB^fid , X CY CX 

Acb^Acb , icy^Icf 
A=A , X=X 



Theorem 1 There exists a set M. (of models) and a satisfaction relation 
\= C M. x C such that C(A) = A iffC satisfies the following three conditions: 

Inclusion A C C(A), 

Idempotence C(C(A)) = C(A), 
Monotonicity A C B C(A) C C(B). 

Proof: The only if part is very easy to prove, using the Galois connection 
properties of the transformations !(->! and A \— > A. 

The z/part takes M to be the set of all theories, the set of all sets T C £ 
such that T = C(T). Define, then, T |= a iff a G T. By the_definition of |=, 

X = HtgxT 1 and A is the set of theories T that include A. A is therefore the 
intersection of all theories that include A. Since, by Idempotence, C(A) is 
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a theory, and since it includes A by Inclusion, A C C(A). By Monotonicity 
C(A) C C(T) = T for any theory T that includes A, and therefore C(A) is a 
subset of the intersection of all such theories T, i.e., C(A) C A | 

As customary in the literature, C(A, B) will denote C(AU B), C(a) denotes 
C({a}) and C(A, a) denotes C(A U {a})- A number of important results about 
the operations that satisfy Inclusion, Idempotence and Monotonicity have 
been proven. Let us mention three of them, in order to consider their gener- 
alization to nonmonotonic operations. The first one is that an intersection of 
theories is a theory. If, for any % 6 /, A4 = C(Ai), then f] ieI Ai = C(C\ i€l Ai). 
The second one is that given a family Cj, i 6 J, of operations that sat- 
isfy Inclusion, Idempotence and Monotonicity, their intersection, defined by, 
(Hie/ = riie/(C(A)) also satisfies Inclusion, Idempotence and Mono- 

tonicity. Another result, worth noticing, is that, if C satisfies Inclusion, 
Idempotence and Monotonicity, and if B C C, then the operation C' defined 
by C'(A) = C(A, B), i.e., the operation that follows from the acceptance of B 
once and for all satisfies Inclusion, Idempotence and Monotonicity. A last, 
for us, important result of Tarski that will be generalized in Section 3.2 is 



that the propositional connectives may be characterized elegantly and one at 
a time by Introduction-Elimination rules. 



3 Plan of this work 

This paper proposes a new family of operations, introduced in Section £|. 
This family is defined by five properties, two of them introduced here for 
the first time. These properties replace Tarski's condition of Monotonicity 
by three weaker properties. The main purpose of this paper is to show the 
importance of this family, and why it crops up naturally in different contexts. 
To this effect, we, first, in Section ^|, describe two very different semantics, or 
ontologies, for nonmonotonic reasoning. The equivalence of these semantics is 
proved, under a simplifying assumption. This equivalence lends weight to the 
claim that both semantics are natural and important. The first one is based 
on choice functions, enjoying properties that have been studied by researchers 
in Social Choice (Social Preferences, Rational Choice or Revealed Preference 
Theory may have been names more to the point) || |3|, |2| already almost 
half a century ago. The link between their preoccupations and ours certainly 
needs further study. The second one is based on a qualitative notion of a 
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measure. Its origins may be traced to Ben-David and Ben-Eliyahu's ||. The 
formalism of Friedman and Halpern's [14|, [15j is the one used here. 

Then, in Section |6|, the simplifying logical assumption is removed and the 
properties we expect of choice functions in the more general framework are 
discussed. One of the central ideas necessary to deal with the general case 



definability preservation has been put in evidence by Schlechta's 31]. The 
semantics proposed are a natural generalization of Tarski's semantics. The 
interest and importance of the family of operations described in Section f| are 
put in evidence in Section |7|, where it is shown that they characterize exactly 
the operations defined by the semantics of Section |[ In Section || we discuss 
further properties of the operations of the family defined in Section [| and, in 
particular, the characterization of propositional connectives by Introduction- 
Elimination rules. It is shown that the logics of the (semantically) classical 
connectives is classical propositional calculus. In Section |9| it is shown that, if 
the language £ is a propositional calculus, the finitary consequence relations 
defined by our family of operations are exactly the preferential consequence 



relations of [jnj . In Section |10| a more restricted family of operations, defined 
by equivalent semantic restrictions concerning choice functions on one hand 
and qualitative measures on the other hand, is characterized by an additional 
requirement on the nonmonotonic operations. Properties of this family are 
briefly discussed. Section [II] is a conclusion. 



4 Nonmonotonic Deduction Operations 

c c 

In this section we shall present five properties of an operation C : 2^ — > 2 , 
discuss them and their relation to properties of monotonic operations. We 
shall argue that they should be satisfied by inference operations. In the next 
sections, we shall define suitable semantics for them and prove a representa- 
tion theorem. 

Our first two properties are uncontroversial, at least for mathematical 
logicians. They may not be satisfied by most deductive agents with bounded 
resources, though. Inclusion and Idempotence are two of the conditions char- 
acterizing monotonic deduction and seem most natural also in the context of 
nonmonotonic deduction. 

Inclusion \/A C C A C C(A), 

Idempotence VAC£ C(C(A)) = C(A). 
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The first one, Inclusion, requires that all assumptions be part of the con- 
clusions. The second one, Idempotence, expresses the requirement that the 
strength or the validity of a conclusion be unaffected by the length of the 
chain of arguments leading to its acceptance. We require the operation C 
squeeze the fruit, i.e., the assumptions to the end, i.e., until no more conclu- 
sions can be obtained. 

The next three properties are properties of restricted monotonicity. They 
are implied by Monotonicity, and express that, in certain situations, Mono- 
tonicity is required. 

Cautious Monotonicity VA, B C C A C B C C(A) => C(A) C C(B) 

Cautious Monotonicity is a restricted form of Monotonicity: any monotonic 
operation is cautiously monotonic. This property was first introduced by D. 
Gabbay |TJ|, in its finitary form and by D. Makinson [23, in its infinitary 



form. It requires that one does not retract previous conclusions when one 
learns that a previous conclusion is indeed true. It seems to have been 
accepted as reasonable by all researchers in the field. A discussion of its 



appeal may be found in [19 



The next two properties are described here for the first time, but they 
are closely related to the property previously discussed under the name of 
Deductivity or Infinite Conditionalization in [[11], [12], [13|, ^5], pl|. The 



first one, termed Conditional Monotonicity, expresses the requirement that 
C behave monotonically if one replaces, in the assumptions, some of the 
assumptions by their consequences. It asserts that non-monotonicity cannot 
be caused by the deduction process itself. It is only the addition of new 
assumptions unrelated to the old ones or assumptions that are less than the 
full sets of conclusions that can lead to non-monotonicity. 

Conditional Monotonicity \/A, B C £, C(A, B) C C(C(A),B) 

This is indeed a monotonicity requirement, if C satisfies Inclusion, since 
A U B C C(A) U B. But this is a very restricted form of Monotonicity: we 
do not allow adding arbitrary, unrelated, assumptions, only replacing part 
of the assumptions by their consequences. When doing so, we do require 
that one does not lose conclusions, but one may add conclusions. It is worth 
noticing that Conditional Monotonicity is an intrinsically infinitary condi- 
tion: even if A and B are finite, C(A) that appears on the right hand side is 
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typically infinite. If C is a Tarski deductive operation, i.e., satisfies Inclusion, 
Idempotence and Monotonicity, then, 



C(A, B) C C(C(A), B) C C(C(A),C(B)) C B)) C C(A, B) 

and we have: C(A, B) = C(C(A), £?). In the system presented here, C(A, B) 
may be a strict subset of C(C(A), B). Conditional Monotonicity seems related 
with Cautious Monotonicity, but it is not. In Cautious Monotonicity, we 
allow the addition of a subset of C(A), whereas Conditional Monotonicity 
requires the addition of C(A) in its entirety. In Conditional Monotonicity, the 
addition may be done in the presence of some other assumptions (B), whereas 
in Cautious Monotonicity B must be empty. The intuitive justification for 
Conditional Monotonicity will be given now, it explains the term Conditional 
Monotonicity: if c G C(A, B), then, in C(A), there should be something (some 
conditional statements) to the effect that: if B then c. But, together with 
B, this should imply c and therefore c should be in C(C(A), B). 

Our last property, termed Threshold Monotonicity, requires that C behave 
monotonically in all cases in which the deduction process has already been 
applied to part of the assumptions, i.e., above the threshold of some C(A). 
If C(A) is part of the assumptions, then C behaves monotonically. 

Threshold Monotonicity C(A) C B C C C(B) C C(C) 

The intuitive reason for this requirement is similar to the one for Conditional 
Monotonicity. We expect that, if C(A) C B and c G C(B), formulas saying 
that: if B then c, are already in C(A). The set C, then, contains both if B 
then c and B, therefore C(C) should contain c. 

Before we move to our main representation result, let us draw one impor- 
tant consequence of the properties above. 

Lemma 1 (Cumulativity, Makinson ||25|J ) If C satisfies Idempotence and 
Cautious Monotonicity, then it satisfies 

Cumulativity A C B C C(A) C(B) = C(A). 



The importance of Cumulativity has been stressed early on by Makinson p4 |. 
Proof: By Cautious Monotonicity, C(A) C C(B). Therefore we have B C 
C(A) C C(B). By Cautious Monotonicity again, we have C(B) C C(C(A)). 
By Idempotence, then C(B) C C(A). | 
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5 Two semantics in a simplified framework 



We shall now describe two natural different semantics for nonmonotonic oper- 
ations: one based on choice functions and one based on qualitative probability 
measures. We shall show their equivalence, under simplifying assumptions 
to be described now. The exact fit between the semantics based on choice 
functions and the formal properties of nonmonotonic deduction operations 
described in Section £| will be proved in Section [f[ 

5.1 A simplifying assumption 

The general setting, assuming an arbitrary language C, will be developed in 
Section ^. It requires that sets of models that may be defined by a set of 
formulas be given prominence. 

Definition 1 A set X of models is said to be definable iff' one of the two 
following equivalent conditions holds: 

1. 3A C £ such that X = A, or 

2. X = Y. 

The set of all definable subsets of X will be denoted by Dx- 

A set of models is definable iff it is the set of all models satisfying some set of 
formulas. In many situations in which a finiteness assumption is reasonable, 
one may avoid the consideration of the special role of definable sets. For 
example, researchers in Social Choice typically assume the set of outcomes 
is finite. Friedman and Halpern, also, assume, at least in part of their work, 
that the base set is finite. For expository purposes, to keep definitions and 
justifications simple, we shall now make a similar assumption, to be lifted in 
Section ||. We shall assume that every set of models is definable. 

Simplifying Assumption VA" CM, X = X 

Any propositional calculus on a finite number of atomic propositions satisfies 
our Simplifying Assumption. 
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5.2 Choice functions 



The properties described in this section have been put in evidence for the 
first time, probably, by researchers in social choice, triggered by H. Cher- 
noff 0, H. Uzawa |42[] and K. Arrow || (for an updated survey, see [pT]]). 
The exact nature of the link between nonmonotonic logics and the theory of 
choice functions needs further research. For the sake of those readers who are 
not familiar with this literature, let us describe briefly its framework: each 
individual has personal preferences over a set of possible outcomes. The so- 
ciety, given a subset of those, the feasible outcomes, must come up with a the 
subset of those feasible outcomes that are acceptable socially, in view of the 
individual preferences. Different methods of social decision result in differ- 
ent functions from sets of feasible outcomes to sets of acceptable outcomes. 
Social Choice investigates the relations between those different methods for 
social decision and the choice functions they determine. 

Independently, Y. Shoham, in ||37|| , proposed a general semantics for non- 
monotonic reasoning, based on preferences among models. The link between 
the properties of choice functions studied by Social Choice researchers and 
Nonmonotonic Reasoning has been put in evidence by Doyle and Wellman |7j , 
Rott |K| an d Lindstrom |23]. Lindstrom generalizes the finitary frame- 
work considered in Revealed Preference Theory to an infinitary framework. 
In [j3l~1 , [32], Karl Schlechta rediscovered choice functions and their proper- 



ties, in the infinitary framework. He also considered an additional property 
needed in such a framework. Schlechta's line of research is best described 



in [[34]] and |55 |. The only novelty of this section is the detailed argumentation 
justifying the assumptions about the choice function. 

The basic idea is that one can generalize Tarski's semantic analysis of 
deduction by considering, instead of all models of a set A of formulas, only a 
subset of this set: the set of best models of A, jumping, on the basis of A, to 
the conclusion that the situation at hand is one of those best situations. Such 
a manner of drawing conclusions from categorical information has been time 
and again attested by researchers in cognitive sciences. Lakoff 's [50] is a good 
introduction. The author's [21] represents a very tentative formalization. 

We consider a set Ai of models, a satisfaction relation |= and a choice 
function / : 2-^ — ► 2-^ that chooses, for a set X of models, the set of best, 
most typical, most important, or preferred models for the set X. Then we 
define the function C by 

(1) C(A)=W)- 
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The use of a choice function to define a (nonmonotonic) consequence oper- 
ation generalizes Shoham's semantics and represents one step up in the ab- 
straction ladder from Shoham's semantics. Shoham assumed that the choice 
function / is defined in a particular way: f(X) is the set of all elements of X 
that are minimal in X, under some, pre-existing, order relation on M.. We 
prefer to deal directly with properties of the function /, without assuming 
any order relation on M.. 

Let us now present natural conditions on /. The monotonic case corre- 
sponds to the case that the function / is required to be the identity function. 
The conditions below are trivially satisfied by the identity function. 

Let us take the following running example, that will exemplify the fact 
that the properties of the choice function / define, in a sense the logic of 
optimization. You are looking for an apartment in Paris. The set of apart- 
ments on the market in Paris is the set Ai. Your real estate agent asks for 
your desiderata and your financial possibilities. You expect her to come up 
with a limited list of the best apartments available in Paris. You expect a 
list that is neither too small nor too large. Notice that this example does 
not fit exactly the Social Choice paradigm, interested in finding a subset of 
outcomes that are acceptable in the view of contradictory preferences of the 
individuals, since we assumed you alone are looking for an apartment. But 
it may be fitted to the Social Choice paradigm if you consider that you are 
shopping for an apartment that fits in some way the contradictory desiderata 
of a family, and of the real estate agent. 

The first property we expect of / is a property of contraction. 

Contraction f(X) C X 

Indeed, intuitively, / picks the preferred models of the set X and those models 
are in the set X. The identity function satisfies Contraction. Contraction is 
assumed in the Social Choice literature without even mentioning it explicitly. 

If you requested an apartment in Paris, you expect to get a list of apart- 
ments in Paris, not in Neuilly or in San Francisco. 

The second property expresses the fact that, if X is a subset of Y, it is 
more difficult to be one of the best of the bigger set Y than to be one of the 
best of the smaller set X. Therefore we expect any element of f(Y) that 
happens to be in X to be in f(X). 

Coherence ICF^ln f(Y) C f(X) 
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This is Sen's property a. The identity function satisfies Coherence. 
Coherence is a kind of antimonotonicity: if X C Y, then antimonotonicity 
would require: f(Y) C f(X), whereas Coherence only requires that this part 
of f(Y) that is included in X is included in f(X). The term Coherence seems 
to be an appropriate name since it expresses the existence of some kind of 
coherent test by which the preferred elements of a set are picked up: the test 
corresponding to a superset must be at least as demanding as the one of a 
subset. The Coherence property appears in Chernoff 's |J and has been given 



his name in p7| . It has been endorsed by all researchers in Social Choice. 

To illustrate Coherence, suppose you now remember you promised your 
wife you would live on the left bank, but forgot to tell that to your agent. You 
tell her that and get a new list, of apartments on the left bank. You expect 
all the left bank apartments that appeared in the first list to be included in 
the second list. The second list will probably also include other apartments, 
that were not part of the, say twenty, best apartments in Paris, but are part 
the best apartments on the left bank. 

The third and last property expresses the fact that, if Y is a subset of X, 
but large enough to include all of f(X), then we do not expect f(Y) to be 
larger than f{X). 

Local Monotonicity f(X) C Y C X f(Y) C f(X) 

The term Local Monotonicity expresses that this is a property of qualified 
monotonicity for /: Y C X implies f(Y) C f(X), conditional on f(X) C Y, 
somehow a local condition. The importance of property has been put in evi- 
dence by M. A. Aizerman ||, |IJ. The identity function satisfies Local Mono- 
tonicity, because it is monotonic, but also trivially, because the assumption 
implies X — Y. 

Suppose all best apartments of Paris included in the list you got from 
your agent happen to be on the left bank. You certainly would not expect a 
larger list if you told her you want only apartments on the left bank. 

Any choice function satisfying Contraction, Coherence and Local Mono- 
tonicity is considered acceptable in this work. A number of other properties 
of choice functions, from the literature, will be discussed now. Researchers 
in Social Choice have universally endorsed the following: f(X) is not empty 
if X is not empty. Some have noticed that this property is not crucial and 
that they could build the theory without it. We have no reason to make 
this requirement: it may well be the case that our search for a large cheap 
apartment in Paris in the best quarter leaves us with an empty list. 
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Another property that has been widely considered is: 



Expansion f(X) n f(Y) C f(X U Y) 

It does not follow from Contraction, Coherence and Local Monotonicity. 
We do not endorse it. An apartment, on the He de la Cite, that makes the 
list of the ten best apartments on the left bank and (or) the He de la Cite and 
also makes the list of the ten best apartments on the right bank and (or) the 
He de la Cite, does not necessarily makes the list of the ten best apartments 
in Paris. One easily sees that the semantics proposed by Shoham in |37J vali- 



dates Contraction, Coherence, Local Monotonicity and also Expansion: if z is 
minimal in X and minimal in Y it is minimal in the union X UY. Therefore, 
the semantics proposed in this paper is a strict generalization of Shoham's. 
In fact, under our simplifying assumption, Shoham's semantics is equivalent 
to considering choice functions that satisfy Contraction, Coherence, Local 
Monotonicity and Expansion. 

We have presented a semantic framework that generalizes Tarski's. It 
involves a choice function on sets of models. This choice function is assumed 
to satisfy three conditions. We argued that those three conditions are natural, 
but the ultimate test of their interest lies ahead. The Social Choice literature 
mentions two main results about choice functions that satisfy Contraction, 



Coherence and Local Monotonicity. In |28 |, it is shown that they are exactly 



the choice functions that satisfy Contraction and 

Path Independence f(X U Y) = f(f(X) U Y). 

In 0, it is shown that, if M. is finite, they are exactly the pseudo-rationalizable 
choice functions, i.e., those that may be defined by a finite set of binary pref- 
erence relations >j on M. by taking, for f(X), the set of all elements of X 
that are minimal in X for at least one of the >j's. None of these results will 
be used in this paper. 

5.3 Qualitative Measures 

A completely different generalization of Tarski's semantic analysis will be 
reviewed now. Its origins may be traced to Dubois and Prade || and Ben- 
David and Ben-Eliyahu [|J. Up to small technical changes, our presentation 
will be that of Friedman and Halpern JM , The connection between 
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both approaches is described in [E£3]. Some more results concerning the link 



between plausibility measures and preferential relations may be found in [10 

Suppose we had some way of measuring the size or the importance of sets 
of models. One is tempted to say that a formula a may be deduced from a 
set A of formulas iff the measure of the set of all models of A that satisfy a 
is larger than that of the set of models of A that do not satisfy a. Since, as 
in the case of monotonic logic, one would like to deduce anything from an 
inconsistent set of formulas, the case that the set of models of A is negligible, 
i.e., not larger than the empty set, has to be treated separately. With the 



notations of Section [572], one would like to assume a binary relation > on 
2-M ^ > y iff the measure of X is larger than that of Y) and define the 
deductive operation by: 

(2) a G C{A) iff either An {a} > A - {a} or A ^ 0. 

This definition indeed generalizes Tarski's. For Tarski: X > Y iff Y = and 
X^0. 

The following list of natural properties for > is similar to Friedman and 
Halpern's definition of a Qualitative Plausibility Measurefj The properties 
described here are in fact stronger than theirs: the representation result 
holds for both sets of properties. First, it seems reasonable to require that > 
be a strict partial order relation, i.e., irreflexive and transitive. This seems 
implied by our description of X > Y as meaning that the measure of X 
is larger than that of Y. Note that we do not require the relation > to be 
total, which would not be reasonable since X and Y may have equal measure 
without being equal, nor even to be modular, i.e., satisfy the property X > Y 
implies that, for any Z, either X > Z or Z > Y. Modularity will be assumed 
in Section [U]. 

(3) The relation > is irreflexive and transitive. 

Friedman and Halpern assume a function PI : 2^ i— > D and a reflexive, transitive and 
anti-symmetric relation < on D satisfying: 

• Al ificy then Pl(X) < Pl(Y), 

• A2 if X,Y,Z are pairwise disjoint sets, Pl(X l)Y) > Pl(Z) and 
Pl(X UZ)> Pl(Y), then Pl(X) > Pl(Y U Z), 



A3 if Pl(X) = Pl{Y) = Pl{$), then Pl(X U Y) = Pl( 
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A second very natural property of > is that it should behave as expected 
with respect to set inclusion. The reader will easily be convinced that, in our 
setting, the correct formulation is the following: 

(4) WDX>YDZ^W>Z. 

Our third property deals with the special character of the empty set. The 
empty set is the ultimate small set and any set X that is not strictly greater 
than the empty set must be extremely small and negligible. In many cases, 
any nonempty set will be strictly greater than the empty set, but we do not 
wish to make this a requirement. Since the union of any family of empty sets 
is empty, it is reasonable to require that the union of a family of negligible 
sets be negligible. 

(5) ViG7,X f ^0 => \JX t ^$ 

16/ 

This is the infinitary version of property (A3) of Friedman and Halpern. The 
finitary version is not enough for Theorem |3] to hold. The next two properties 
have to deal with the qualitative character of the relation >. Qualitatively 
greater has to be understood here as an order of magnitude greater. Assume 
X U Y > Y. If X U Y is an order of magnitude greater than Y, it must be 
that X is already greater than Y. 

(6) XUY >Y ^ X >Y 

Note that the definition of C in |2] makes use of the relation > only between sets 
with an empty intersection. Property ^| can therefore only have an indirect 
influence. The qualitative plausibility measures of Friedman and Halpern 
need not satisfy Property ^. The results presented in Section [5]4] show that 
one may add this property without harm. Friedman and Halpern consider a 
property (A2) that implies the finitary version of [7| The finitary version of ^ 
together with ^| imply (A2). The next and last property is the fundamental 
one that makes the qualitative character of > apparent. 

(7) Vz G /, X > Y t X > |J Yi 

iei 

A set that is greater than every one of a family of sets must be greater than 
their union: pooling small sets never makes a big set. This seems to be the 
essence of qualitative. 
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We have presented a set of properties for > and have argued that they 
are natural properties for a qualitative measure. No such argument can be 
completely convincing. In the next section, it will be shown that the prop- 
erties |3], £|, §, H and ^ for > are equivalent to the conditions of Contraction, 
Coherence and Local Monotonicity for /. This equivalence suggests that 
those two sets of properties and the nonmonotonic operations they define 
have a central role to play in the study of nonmonotonic logics. To the 
best of my knowledge, the qualitative measures have not been studied by 
the Social Choice community. Since, as will be seen in Section |5.4j , they are 
equivalent to choice functions, it may be worthwhile to ask whether they can 
help there. The property of Expansion considered in Social Choice translates 
readily into \J ieI X { > Z implies that there is some i G I such that Xj > Z. 



5.4 A Semantic Equivalence 

Theorem 2 Suppose f is a choice function that satisfies Contraction, Co- 
herence and Local Monotonicity. Then, the relation > defined by: X > Y iff 
f(X) ^ and YD f(X U Y) = satisfies properties & 0, & @ andft. IfC is 
defined by Equation then it satisfies Equation |^. 

Before we get to the proof, let us ponder on the translation proposed. Is 
it a natural translation, i.e., does it fit the intuitive interpretations given to 
> and /? The sets X such that f{X) = are the no solution sets (in our 
running examples: no suitable apartments in X). They may be assumed to 
be small. If X is qualitatively larger than Y, it is reasonable to assume that 



X is not so small as to have an empty image under /. In Section |T3|, the 
intuition we developed was that X is qualitatively larger than Y means that 
X contains some important elements Y does not contain. The important 
elements are those of f(X) and Y contains none of them. 

Proof: Let us show, first, that C satisfies Equation |2|. Obviously a G f(A) 
iff f(A) C {a}. By Contraction, we have 

f(A) C {a} iff (A - H) n f(A) = 0. 

The only thing left for us to check is that if (A — {a}) D f{A) = and 
f(A) ^ 0, then f(A PI {a}) ^ 0, which follows from Coherence. 

Irreflexivity of > follows from Contraction. For Transitivity, assume 
f(X) ^ 0, Y n /(X U Y) = 0, f{Y) ^ and Z n f(Y U Z) = 0. We want to 
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show that Z H f(X U Z) = 0. By Contraction, we know that /(X U Y U Z) C 
(X - Z)U (yuZ)n/(IU7U Z). By Coherence, (F U Z) n /(X U7UZ) C 
}(F U Z). By assumption, f(Y U Z) C Y - Z. We conclude that /(X U F U Z) C 
(X UY)-Z and therefore /(X U F U Z) C X U F. By Coherence again, 
then /(X U F U Z) C /(X U F) and, by assumption, f(X U F U Z) C X. 
We have /(X UFUZ)CXUZCXUFUZ. By Local Monotonicity, 
then, we conclude that /(X U Z) C /(X U F U Z). Therefore f(X U Z) C 
(X U F) - Z. We conclude that Z n /(X U Z) = 0. 

For property § assume X D F, IF D Z, /(F) 7^ and IF fl /(F U IF) = 0. 
Assume /(X) = 0. We have /(X) C F C X and, by Local Monotonicity, 
f(Y) C /(X) and /(X) ^ 0. We have shown that /(X) ^ 0. We have 
/(F UW) C.Y CYUZ C.YUW. By Local Monotonicity, then, we have 
f (Y U Z) C f(Y U W). By Coherence, 

(F U Z) n /(X U Z) C /(F U Z) C f(Y U tF) C F - VF C F - Z. 

We conclude that Z n /(X U Z) = 0. 

For property ^ we notice that, from the definition of >, X > iff /(X) ^ 0. 
We have to show that /(Xj) = for any i G I implies /(U igJ Xj) = 0. This 
follows from Contraction and Coherence. 

For property g assume /(X U F) 7^ and F fl /(X U F) = 0. The only 
thing left for us to prove is that we have /(X) 7^ 0. Notice that, by Coher- 
ence, X n /(X U F) C /(X). It is enough to show that X n /(X U F) 7^ 0. 
By Contraction, /(X U F) C X U F and, therefore, 

/(x u F) c x n /(x u F) u f n f(x u f) = x n /(X u f), 

by assumption. 

Before we prove the last property needed, 0, let us prove a lemma. 
Lemma 2 /(U e /X) C U e //(X). 

Proof: By Coherence, we have Xj fl /(U ig/ Xj) C /(Xj). By Contraction, 

/(U e /X)cu e/ X. I 

For property [7|, assume /(X) 7^ and F H /(X U F) = for any i 6 /. By 
Lemma|, /(X U U e / F) C U i6 j /(X U F). But, by assumption, /(X U F) C 
X, for any % E I. Therefore, for any j E I, f(X U \J ieI F) C X U Yj. By Co- 
herence, then, (X U Yj) n /(X U U ie / F) C /(X U F^) CI- F,-. We have 
shown that, for any j E I, f(X U \J ieI F) Q X — Yj. We conclude that 

UF,n /( xu|J^) = 0- 

jei iei 
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I 

Before we get to the second leg of our equivalence trip, let us notice an 
additional property. 

Definition 2 If x G X we shall say that x is heavy in X iff X ^ {x}. 

Lemma 3 // the relation > is defined as in Theorem [| ; then, if f{X) = 
all the members of X are heavy, and if f(X) ^ 0, the heavy elements of X 
are precisely the members of f(X). 

The proof is obvious. 

The second half of the equivalence between choice functions and qualita- 
tive measures will be described now. 

Theorem 3 Suppose > is a qualitative measure that satisfies properties [| ; 
0, [6| and [?|. Then, the choice function f defined by taking for f{X) the set 
of heavy elements (see Definition ||) of X satisfies Contraction, Coherence 
and Local Monotonicity. IfC is defined by Equation [| ; it satisfies Equation |||. 

Proof: By definition, / satisfies Contraction. For Coherence, assume X CY 
and x G X is heavy in Y, i.e., Y ^ {x}. By property £|, X ^ {x} and x is 
heavy in X. We have proved that / satisfies Coherence. 

For Local Monotonicity, assume Y <0 X and all heavy elements of X are 
in Y. Let y be a heavy element of Y. We know that y G X. We must show 
that y is heavy in X. Since all heavy elements in X are in Y, any member 
z of X — Y is not heavy in X and therefore X > {z}. By property [7|, we 
have X > X — Y. If y was not heavy in X, again by [7|, we would have 
X > (X - Y) U {y}. By property § then, Y — {y} > X - Y U {y}. By 
property [|, then, we would have Y > {y}, contrary to the assumption that 
y is heavy in Y. We have shown that / satisfies Local Monotonicity. 

We must now show that C satisfies Equation |l| Our proof will be exactly 
the same as the corresponding part of the proof of Theorem |2], once we have 
shown that the property used as a definition in Theorem § holds true. 

(8) X > Y iff f(X) ^ and Y n f(XUY) = 

Assume X > Y. By property |], X > 0. By property |5|, there is some el- 
ement of x G X such that {x} > 0. The element x is heavy in {x} since 
> is irreflexive, and therefore x G f({x}). By Coherence, we conclude that 



17 



/(X) 7^ 0. By property [|, if y 6 Y, then X > {y} and y is not heavy in X. 
We have shown that Y H /(X) = 0. 

Suppose now that f(X) ^ and Y fl /(X U Y) — 0. For any element 
y G y, IU7> {y}. By property |7|, X UY > Y. By property §, X > Y. 
I 

We have shown that the two very different semantic frameworks proposed 
by choice functions and qualitative measures are equivalent. This is a clear 
indication that the notion captured is important and that the operations 
C that may be defined in those frameworks form a class of great interest. 
Section ^ proposes a characterization of those operations. The representation 
result is proved in Section |7|. 

6 Choice functions: a general semantics for 
nonmonotonic operations 

It is now time to get rid of the simplifying assumption that all sets of models 
are definable (see Definition [I]), made in Section In the general case, 



when certain sets of models are not definable, we must take a second look 
at the properties of choice functions considered in Section Notice, first, 



that in the definition of C(A) as f(A), the argument of / is a definable set 
(A). We have no need for applying / to a set that is not definable and, 
therefore, we shall assume that the domain of / is the set of definable sets of 
models. First, we shall require that the image under / of a definable set be 



definable. This requirement has been introduced by Schlechta in ||31|| . Then, 
we shall understand the variables X and Y appearing in the definition of 
the properties of / that we considered (Contraction, Coherence and Local 
Monotonicity) , not as ranging over all sets of models X and Y, but only over 
definable such sets. 

On the first point, we expect to be able to describe (by a set of formulas) 
the sets in which we are interested, and on which we want to apply the choice 
function /. But, similarly, we expect the result of the application of /, the set 
of preferred elements of a set X to be definable by a set of formulas (otherwise, 
how could we describe it in the language at our disposal?). We shall consider 
choice functions that are defined only on definable sets of models and that 
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send definable sets to definable sets, i.e., we assume: 



Definability Preservation MA C C, f(A) = f(A) 

The identity function obviously preserves definability. This property has 
never been considered by the Social Choice community, which seems to have 
been interested so far only in the case that M. is finite. 

On the second point, for example, Local Monotonicity is now under- 
stood as: for any definable sets X, Y, such that f(X) C Y C X, one has 
/CO Q /P0- It turns out (the proof is left to the reader) that one may ex- 
tend any / defined on definable sets (and satisfying Contraction, Coherence 

and Local Monotonicity) to arbitrary subsets by: f(X) — X fl f(X). This 
extension satisfies Contraction and Coherence for any subsets X, Y, but it 
does not satisfy Local Monotonicity for arbitrary such sets. It satisfies the 
following: for any sets X, Y such that f(X) cycX, one has f(Y) C f(X). 

In the next section, the family of nonmonotonic operations defined by 
Equation |T] from definability-preserving choice functions that satisfy Con- 
traction, Coherence and Local Monotonicity will be described. 

7 Representation result 

We shall now state and then prove our main characterization result. It proves 
an exact correspondence between the choice function semantics of Section |] 
and the properties of C described in Section [|. Theorems |2] and |3| show that 
those properties also correspond exactly with the qualitative measures of 
Section |5.3| , at least under the simplifying assumption of Section |5.1| . Lifting 
this simplifying assumption there would involve a careful study of which sets 
of models are measurable in the qualitative sense. This can surely be done. 

Theorem 4 Suppose we are given a language C and a function C : 2 — > 2 . 
Then, the following two conditions are equivalent: 

1. C satisfies Inclusion, Idempotence, Cautious Monotonicity, Conditional 
Monotonicity and Threshold Monotonicity, 

2. there exists a set Ai (of models), a satisfaction relation \= C A4 x C 
and a definability-preserving choice function f : Dj^ — > Dj^ satisfy- 
ing Contraction, Coherence and Local Monotonicity such that C (A) = f(A) . 
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The notation is explained in Definition [I]. 

Proof: First, let us show soundness: property ^ implies property [I]. Assume 
M. is a set and |= a binary relation on M. x C Assume / satisfies Defin- 
ability Preservation, Contraction, Coherence and Local Monotonicity. Define 
C(A) = /(A). We shall show that C satisfies Inclusion, Idempotence, Cau- 
tious Monotonicity, Conditional Monotonicity and Threshold Monotonicity. 

For Inclusion, notice that, by Contraction, f(A) C A, and therefore A C 
/(A) = C{A). But AC A and we conclude that A C C(A). We shall now 
prove a lemma that makes use of the definability preservation property. 

Lemma 4 /(A) — C(A). 

Proof: By Definability Preservation, f(A) = f(A). But f(A) = C(A). | 

For Idempotence, notice that, by Inclusion (already proved), we have A C C(A) 
and therefore C(A) C A. By Coherence, then, we have C(A) n /(A) C f(C{A)). 

By Lemma | C(A) n /(I) = /(I) and f(A) C /(C(A)). We conclude that 
we have C(C(A)) C C(A). The opposite inclusion follows from Inclusion. 
For Cautious Monotonicity, we use Local Monotonicity and Lemma |j. 

Assume AC B C C(A). We have C(A) C B C A. By Lemma |, f(A) = 

f(A) C B C A. Local Monotonicity, then, implies that f(B) C /(A). We 
conclude that C(A) C C(B). 

The next remark will be useful. 

Lemma 5 AC C(A). 

Proof: Since, by Contraction, f(A) C A. | 

We shall prove Conditional Monotonicity and Threshold Monotonicity. Since 
AU~B C A, Coherence implies that we have A~U~B n /(A) C /(XTjB). By 
Lemma|, At?5 n C(A) C f{AAjB). Therefore Mod(A U B U C(A)) C /(AUb) 
and 

C(A,B) C Mod(A UBU C(A)) = Mod(C(A) UB)C Mod(C(A) UBU C), VC. 

By Lemma |^, then, C(A,B) C C(C(A), B, C). Conditional Monotonicity is 
obtained by taking C = 0. For Threshold Monotonicity, take A = C(D) and 
use Idempotence. 

We have proved the soundness part. Let us proceed to the proof of com- 
pleteness: property [l] implies property §. Assume that C satisfies Inclusion, 
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Idempotence, Cautious Monotonicity, Conditional Monotonicity and Thresh- 
old Monotonicity. We shall now describe A4 and the satisfaction relation |= 
in a unsurprising way. We shall take M. to be set of all sets T of formulas 
such that T = C(T). Such a set T will be called a theory. We shall define |= 
by: T \= a iff a G T. 

Let us draw some consequences from the definition of |=. 

Lemma 6 For any A C C, A is the set of all theories that include A and 
A=n B cCC(A,B). 

Proof: By definition, A is the set of all theories that include A and A is the 
intersection of all theories that include A. Let T be any theory that includes 
A: AC T = C{T) = C(A, T) andjherefore T = C(A, B) for some B. We 
have shown that fl BC £ C(A, B) C A. 

But, C(A, B) is a theory, by Idempotence, and it includes A by Inclusion. 
Therefore A C fl BC £ C(A, B) and our claim is proved. | 
To simplify notations we shall write: 

(9) Cn(A) = A= p| C(A,B). 

BCC 

Since Cn(A) is the intersection of the sets C(B) for all sets B including A, 
it is the largest monotonic sub-mapping of C. Since Cn(A) = A, it is a con- 
sequence operation, i.e., satisfies Inclusion, Idempotence and Monotonicity. 
This remark is very close to a result of J. Dietrich in ||. Notice that, by 
Conditional Monotonicity and Threshold Monotonicity we have: 

(10) C{A,B)CCn{C{A),B). 



Lemma 7 A C Cn(A) C C(A). 

Proof: We have seen that Cn satisfies Inclusion. By taking, in the definition 
of Cn, B = 0, one sees that Cn(A) C C{A). | 

Lemma 8 (Right Absorption) C(Cn(A)) =C(A). 



21 



Proof: By Lemmas |7] and [I| | 



Lemma 9 (Left Absorption) Cn(C(A)) =C(A). 

Proof: By Lemma 0, we have C(A) C Cn(C(A)) C C(C(A)). By Idempo- 
tence, we have C(A) = Cn(C(A)) = C(C(A)). | 

We may now define the choice function /. Consider an arbitrary definable 
set X = A C M.. By Lemma ||, A = 5 implies C(A) = C{B) and therefore 
we may define /(X) by: 

(11) f(A)=C(A). 

One immediately sees that the choice function / preserves definability, since 
C(A) is definable. We must now show that / satisfies Contraction, Coherence 
and Local Monotonicity, and that 

(12) C(A)=W)- 

Let us deal with this last question first. By (|ll|), f(A) = C(A). Therefore 

f(A) = C(A) = Cn(C{A)). By Lemma g f(A) = C(A). We have shown that 
Equation [12| holds. 

It is clear from Equation [TT] that / satisfies Contraction. Let us prove now 
that / satisfies Coherence. Assume X CY. We have 7CI and therefore 
C(X) = C(Y,X). By Equation 0, we have C(X) C Cn(C(Y),X). Therefore, 

Mod(C(F) UI)C Mod(C(X)) and C(F) nfc C(X). But, X C X and 
therefore _ 

x n /(r) = x n Y n C(F) cin c(F) c C(X). 

We conclude that ln/(y)Cln C(X~) = f(X). 

Finally, let us show that / satisfies Local Monotonicity. Assume f(X) C 
Y CX. We have, by Equation §, IC7C /(X) = C(X). By Cautious 
Monotonicity, then, we conclude that C(X) C C(y) and C(F) C C(X). Since 
yci, y n C(y) C X n C(X). The proof of Theorem ^ is now complete. 
I 

One may check that, if the operation C is monotonic, then, the operation / 
defined in the construction above is the identity on definable sets: f(A) is 
C(A), the set of all theories that include C(A), which is equal to A, the set 
of all theories that include A. 



22 



8 Properties of nonmonotonic operations 



8.1 First Properties 

We shall consider some properties of the operations that satisfy Inclusion, 
Idempotence, Cautious Monotonicity, Conditional Monotonicity and Thresh- 
old Monotonicity, nonmonotonic operations in the sequel. 

For such operations, the intersection of two theories is not always a theory. 
Consider, for example, the language that contains two elements a and b and 
the operation defined by: C(A) = A for any A ^ and C(0) = {a}. This is 
not a monotonic operation: the only breach of monotonicity is C(0) % C(b). 
It is easy to check that it satisfies our conditions. But C(a) n C(b) = is not 
a theory. 

In the monotonic framework, the operation C is defined by the set of 
its theories, C(A) being the intersection of all theories including A. In the 
nonmonotonic framework, this is not the case. Two different operations may 
define the same set of theories. The example above will prove our case. The 
operation C' defined by C'(0) = {b} and otherwise C'(X) = C(X) is different 
from C but it has exactly the same theories as C. 

The property concerning the intersection of a family of operations holds, 
but its proof is more intricate that in the monotonic case. If Ci is a family of 
nonmonotonic operations (i.e., satisfying Inclusion, Idempotence, Cautious 
Monotonicity, Conditional Monotonicity and Threshold Monotonicity), its 
intersection is a nonmonotonic operation. The easiest proof may be semantic: 
each Ci is defined by a set Aii and a choice function /j. Consider the set 
Ui M-i (assume the Aii have pairwise empty intersections) and the function / 
that operates as fi on M. { and takes the union of the sets obtained this way. 
It is easy to see it satisfies Inclusion, Coherence and Local Monotonicity. The 
operation defined this way is the intersection of the Cj's. 

It is easy to see that, if C is nonmonotonic, i.e., satisfies Inclusion, Idem- 
potence, Cautious Monotonicity, Conditional Monotonicity and Threshold 
Monotonicity, then, so is C defined by: C'(A) = C(A, B). 

8.2 Connectives 

We shall now find elegant properties of (nonmonotonic) C that characterize 
the (semantically) classical propositional connectives. We shall see that the 
nonmonotonic logic of the (semantically) classical connectives is classical 
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propositional logic. We do not consider, in this work, the many possibilities 
offered by nonmonotonic logics for the definition of non-classical connectives, 
i.e., connectives that are not defined by truth tables. As in the case of 
monotonic logic, some additional compactness property is needed for the 
completeness result. The property required is weak and does not amount at 
all to requiring the operation C to be compact. 

A word of caution about terminology is needed here. In sequent calcu- 
lus presentations, connectives are characterized by left and right rules. In 
natural deduction presentations, they are characterized by introduction and 
elimination rules. We mix those two terminologies freely to name the rules 
we are interested in. 

Let us consider, first, the case of conjunction. Assume that C is closed 
under a binary A and that we consider only satisfaction relations that satisfy: 

(13) x|=aA6iffx|=a and x |= b. 
Then C, defined by C(A) = f(A) satisfies: 

(14) C(A,aAb)=C(A,a,b). 

The proof is very easy: the models that satisfy A and a A b are exactly those 
that satisfy A, a and b. Notice that the treatment of conjunction is exactly 
the same as in the monotonic case. 

Let us, now, consider the case of negation. Assume £ is closed under a 
unary -i and that we consider only satisfaction relations that satisfy: 

(15) x |= —>a iff x \/= a. 

The left introduction rule of the monotonic case: a G C(A) implies C(A, ->a) = 
L is not valid in our nonmonotonic framework. The rules we propose to char- 
acterize negation are the following. 

(16) C(A,a,^a)=£ 

(17) C(A, -a) = C a e C(A) 

The validity of those rules is easy to prove. For the first one, there are 
no models that satisfy A U {a} U {->a}, therefore, by Contraction we have 
f(Mod(A U {a} U {->a})) = and C(A, a, -*z) = C. For the second one, since 
no model satisfies all formulas, if C(A, ->a) = C, it must be the case that 
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f(Mod(A U {->a})) = 0. By Coherence, Mod({^a}) n f(A) = 0. Therefore 
f{A) C Mod({a}) and a G One may notice that a similar result fails 

in Relevance Logic |2£|, where the Boolean negation of [Po|, defined by flT5"D, 
is not reasonable. 

Consider, now, the case of disjunction. Assume C is closed under a binary 
V and that we consider only satisfaction relations that satisfy: 

(18) x \= a V b iff either x \= a or x \= b. 

The Or introduction rule of monotonic sequent calculus, a left introduction 
rule, is valid: 

(19) C{A,a)nC{A,b) QC{A,aVb). 

This follows easily from the fact that a model that satisfies a V b satisfies at 
least one of a or b and from Coherence: 

/(Mod(A U {a V b})) C /(A n R) U /(A H {&}). 

The right elimination rule of the monotonic case: C(A, a V b) C C(A, a) D C(A 6) 
is not valid. We replace it by a right introduction rule. 

(20) a e C(A) ay be C(A), b e C(A) => a V b e C(A). 

Its validity is obvious. 

Lastly, consider the case of material implication. Assume £ is closed 
under a binary — > and that we consider only satisfaction relations that satisfy: 

(21) x \£ a — > b i& x \= a and x \/= b. 
The right introduction rule of the monotonic case is valid: 

(22) b e C(A, a) => a^be C(A). 

Assume b e C(A,a). Let B be set of all models in f(A) that satisfy a. By 
Coherence, B C f(Mod(A U {a})) and therefore all models in B satisfy b 
and also a — >• 6. All models in /(A) — B satisfy a — >• 6. We conclude that all 
models in /(A) satisfy a — > b and a — > 6 G C(A). The right elimination rule 
of the monotonic case: a 6 G C(A) implies 6 G C(A, a) is not valid. We 
shall use the following left introduction rule: 

(23) beC{A,a,a^b) 
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which is easily seen to be valid. 

Suppose C is closed under some subset of the connectives A, V and — >. 
Is it the case that any operation C that satisfies Inclusion, Idempotence, Cau- 
tious Monotonicity, Conditional Monotonicity, Threshold Monotonicity and 
the two properties corresponding to each one of the connectives concerned 
may be defined by a set of models, a satisfaction relation that satisfies the 
requirement concerning each of the connectives considered and a choice func- 
tion that satisfies Inclusion, Coherence and Local Monotonicity? 

The answer cannot be positive in general. Although the answer is positive 
for a language C that contains conjunction as its sole connective, it is negative 
as soon as C contains a negation. A compactness assumption will ensure a 
positive answer. Without any such assumption, already in the monotonic 
framework, the result does not hold. Consider the following example. The 
language C has an infinite set of atomic propositions and is closed under 
negation. The monotonic operation C satisfies a G C(A) iff C(A, ->a) = C, 
and therefore we may always remove double negations and is defined (up 
to removal of double negations) by: C(A) = A if A is finite and does not 
contain an atomic proposition and its negation, and C(A) = C otherwise 
(i.e., if A is infinite or contains an atomic proposition and its negation). 
Notice that this C fails the Lindenbaum lemma: there are consistent sets 
but no maximal consistent set. Assume C is representable by a suitable /. 
Let Y = /(0) and y G Y. We have {y} = y, and, by Coherence, y G f({y})- 
Also, f({y}) = C(y). But y includes a infinite number of atomic propositions 
or an infinite number of negations of atomic propositions, therefore C(y) = C 
and f({y}) = 0. A contradiction to y G f({y})- We conclude that Y — 0. 
But then C(0) = £, a contradiction. 

We shall, then, assume that C satisfies the following: 

Weak Compactness C(A) = £ =>• 3 a finite BC f A such that C(B) = C. 

Notice that the Weak Compactness assumed does not imply, in the nonmono- 
tonic framework, that, if a G C(A), then there is a finite subset B of A such 
that a G C(B), even when proper connectives are available. In the monotonic 
case, the monotonic left introduction rule for negation makes Compactness 
follow from Weak Compactness, but we rejected this rule. 

Before we state and prove the main theorem of this section, let us build the 
tools for the proof. We shall assume that C satisfies Inclusion, Idempotence, 
Cautious Monotonicity, Conditional Monotonicity, Threshold Monotonicity 
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and Weak Compactness. We assume that £ is closed under some set of 
connectives that includes negation and that C satisfies the two properties 
described above for each of the connectives assumed to be in the language 



in particular it satisfies [16| and |T^). Recall that A is a theory iff A = C(A). 



Definition 3 A set A C £ is said to be inconsistent iffC(A) = C A set that 
is not inconsistent is said to be consistent. 

Notice that, by Idempotence, A is consistent iff C(A) is consistent, and that 
there is only one inconsistent theory, namely £. 

Lemma 10 If AC B and A is inconsistent, then B is inconsistent. 

Proof: We have: A C B C £ = C(A). By Cautious Monotonicity, then, 
£ = C(A) C C(B). | 

The following notion is fundamental. 

Definition 4 A set A is said to be maximal consistent iff it is consistent 
and any strict superset B D A is inconsistent. 

The next two lemmas are central. 

Lemma 11 If A is consistent, there is some maximal consistent set B such 
that AC B. 

Proof: The proof is as in the classical case. It is included only for complete- 
ness sake. Consider any ascending chain of consistent sets, Ai, i G I, where 
i < j implies Ai C Aj. We claim that the union B = \J ieI A^ is consistent. 
If it were inconsistent, by Weak Compactness, there would be some finite 
inconsistent subset of B. This subset would be a subset of Ai for some i, and 
by Lemma ITU], Ai would be inconsistent, contrary to assumption. We have 



shown that the union of any ascending chain of consistent sets is consistent. 
Zorn's lemma, then, implies that any consistent A may be embedded in a 
maximal consistent set. | 



Lemma 12 If A is maximal consistent, then 

1. A is a theory, 

2. (if A is in the language) a Ab G A iff a G A and b G A, 
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3. -ia G A iff a G" A, 



4- (if\/ is in the language) aVbeAiffaeAorbeA, 

5. (if — > is in the language) a^b^AiffadA and b G" A. 

Proof: Assume A is maximal consistent. If C(A) were a strict superset of 
A it would be inconsistent, but then A would be inconsistent. Therefore 
C(A) = A. 

By and since A is a theory, a Ab & A iff a G A and 5 G A The 
maximality of A is not used here. 

Assume ->a G A. If we had a G A, we would, by [IB] have C(A) = C, a 
contradiction to the consistency of A. Assume, now, ->a G" A. Since A is 
maximal consistent, C(A, ->a) = C. By [IT], we have a G C(A) = A. 

Assume a G A or b G A By the right introduction rule a V 6 G C(A) = A 
Assume, now that a V 6 G A We must show that at least one of a or b is in 
A Suppose, a contrario, that neither one is in A. Since A is maximal consis- 
tent, both C(A, a) and C(A, b) are equal to C But, then, the left introduction 
rule [19| implies C(A) = C(A, a V b) = C, a contradiction. 

Assume a G" A Since A is maximal consistent, C(A a ) — A an d there- 
fore b G C(A a) and, by the right introduction rule a — ► 6 G C(A) = A 
Suppose, now, that a G A If a — > b G A, then, by the left introduction 
rule |23|, b G C(A) = A. If a — > b $ A, then, by the right introduction rule |22|, 
b£C(A,a)=C(A) = A. I 

The next theorem shows that the Introduction Elimination rules above define 
exactly the (semantically) classical connectives. 

Theorem 5 Assume that C is closed under some of the propositional con- 
nectives, including negation, and that C satisfies the Introduction and Elimi- 
nation properties described above for each of the connectives of the language. 
Let C satisfy Inclusion, Idempotence, Cautious Monotonicity, Conditional 
Monotonicity, Threshold Monotonicity and Weak Compactness. Then, there 
is a set M., a satisfaction relation \= that behaves classically for each of 
the existing connectives and a definability-preserving choice function f that 
satisfies Contraction, Coherence and Local Monotonicity that defines C, i.e., 
such that C(A) = f(A), for any A C £. 
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Proof: The proof proceeds exactly as the proof of the completeness part of 
Theorem [|, except that, for the set M. we take, not all theories, but only the 
maximal consistent sets of formulas. The proof proceeds exactly in the same 
way, as soon as we have proved Lemma [13] to replace Lemma |]. The fact 
that the satisfaction relation behaves classically for the connectives follows 



from Lemma 12. | 



Lemma 13 For any AC. C, A is the set of all maximal consistent sets that 
include A and A = f] Bc jrC(A, B). 

Proof: By definition, A is the set of all maximal consistent sets that include 
A and A is the intersection of all maximal consistent sets that include A. Let 
T be such a set. By Lemma [12], T is a theory and: A C T = C(T) = C(A, T) 
and therefore T = C(A, B) for some B. We have shown that C\bc£ C(A, B) C 

A. 

But, suppose, now, that a C(A, B). By [17], C(A, B, -ia) ^ C (we need 



here the assumption that negation is in the language). By Lemma [11 
C(A, B, ->a) is a subset of some maximal consistent set. This set, since it 
is consistent and contains ->a, does not contain a (see [16]). Therefore a ^ A. 
We have shown that A C H BC £C(A B) and our claim is proved. | 

One may ask whether the result holds even for languages that do not include 
negation. The question is open. But, notice that, in the proof, we make 
use of the fact that, if T is a theory and a ^ T, then there is a maximal 
consistent superset of T that does not include a. This does not hold in 
general: for example, if C is the operation of deduction of intuitionistic logic 
and p is an atomic proposition, p ^ C(-i->p), but any maximal consistent set 
that includes — > — >_p must include p. 

We may now show that propositional nonmonotonic logic is not weaker 
than (and therefore exactly the same as) monotonic logic. 

Theorem 6 Let £ be a propositional calculus and a,b 6 C. The following 
propositions are equivalent. 

1. a logically implies b, i.e., a \= b, 

2. for any operation C that satisfies Inclusion, Idempotence, Monotonicity, 
Weak Compactness and the Introduction- Elimination rules above: b e C(a), 
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3. for any operation C that satisfies Inclusion, Idempotence, Cautious 
Monotonicity, Conditional Monotonicity and Threshold Monotonicity, 
Weak Compactness and the Introduction- Elimination rules above: b G C(a) 

4- for any such C and for any A C C: b G C(A, a), 

5. for any such C: C(a, -ib) = C 

Proof: Property [| implies |, since, by Cumulativity, C(a,->b) = £ implies 
C(A, a, ->b) = C, and, by the Left Elimination rule for negation: b G C(A, a). 
Property ^ obviously implies |3], that obviously implies || It is easy to see 
that property |2| implies [I]. Let m be any propositional model that satisfies 
a. Let C be defined by C(A) = {m}, the set of formulas satisfied by m, if 
m G A and C(A) = C otherwise. By assumption, b G C(a). But C(a) = {m} 
since m G {a}, therefore m\= b. 

The only non-trivial part of the proof is that [I] implies |5|. Assume 
a |= b and C satisfies Inclusion, Idempotence, Cautious Monotonicity, Con- 
ditional Monotonicity and Threshold Monotonicity, Weak Compactness and 
the Intro duct ion- Elimination rules. By Theorem [5], there is a set Ai, a sat- 
isfaction relation |= that behaves classically with respect to the connectives 
and a definability-preserving choice function satisfying Contraction, Coher- 
ence and Local Monotonicity such that C(a,->b) = f({a} n {~>b}). But, by 
assumption {a} fl {^b} = 0. By Contraction, then C(a, -ib) — = C. | 

Theorem ^| shows that the proof theory of the semantically-classical proposi- 
tional connectives in a nonmonotonic setting is the same as in a monotonic 
setting. The nonmonotonic setting is very rich, and it is tempting to consider, 
there, connectives the semantics of which is not locally truth-functional: the 
truth-value of Da or of a y b in a model m depending on the choice function 
/. This is left for future work. 

It is customary to consider Introduction-Elimination rules as definitions 
of the connectives. Hacking ]T7|, Section VII] discusses this idea and proposes 



that, to be considered as bona fide definitions of the connectives, the rules 
must be such that they ensure that any legal logic on a small language may be 
conservatively extended to a legal logic on the language extended by closure 
under the connective. We may ask whether any nonmonotonic operation C on 
C that satisfies Inclusion, Idempotence, Cautious Monotonicity, Conditional 
Monotonicity and Threshold Monotonicity may be conservatively extended 
to such an operation that satisfies the Introduction-Elimination rules above: 
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flTJ), (0), (0), (|T§, @, © and |23|). From the discussion above, just 
before the definition of Weak Compactness, it seems that Weak Compactness 
will be required. The question of whether Weak Compactness is sufficient to 
ensure a conservative extension is open. The result will be proven under a 
stronger assumption: the set of atomic propositions is finite (this essentially 
the Simplifying Assumption of Section |5.1|) . 



Theorem 7 Let £ be the propositional calculus on a finite set P of atomic 
propositions. Let C be an operation on P that satisfies Inclusion, Idem- 
potence, Cautious Monotonicity, Conditional Monotonicity and Threshold 
Monotonicity. Then, there exists an operation C on £ that satisfies Inclu- 
sion, Idempotence, Cautious Monotonicity, Conditional Monotonicity, Thresh- 
old Monotonicity and the rules: ^), §f§), 0, (fJ|j ; §2$), dJ§J and $2^), 
such that, for any A C P, C(A) = P n C'{A). 

Proof: Since P is finite, C is trivially weakly compact, the assumptions 
of Theorem || hold and C is therefore generated by some Ai, \= and /. 
All subsets of M are definable and / is therefore defined on all subsets of 
M. We may extend |= to the language £ by using equations (|13"D, (|15D, 
(|T8| ) and( [H]). The choice function /, then defines an operation C on £ 
by ([!]). Since / satisfies Contraction, Coherence and Local Monotonicity, 
the operation C satisfies Inclusion, Idempotence, Cautious Monotonicity, 
Conditional Monotonicity and Threshold Monotonicity. Since the models of 
M satisfy equations (pf) , (|T5|) , fll8D and( |2T|) , C satisfies the Introduction- 
Elimination rules. It is left to us to see that C(A) = Pr\C'(A), for any 
A C P. This follows straightforwardly from the fact that both C(A) and 
C'(A) are the set of formulas (the former of P, the latter of £) satisfied by 
all models of the set f(A). | 



9 Comparison with previous work 

Let us assume that £ is a propositional language, and that C satisfies Weak 
Compactness, Inclusion, Idempotence, Cautious Monotonicity, Conditional 
Monotonicity, Threshold Monotonicity and the Introduction-Elimination rules 
for all the propositional connectives. One may define a consequence operation 
on £ by: a\~b iff b E C({a}). 

Theorem 8 Under the assumptions above, the relation |~ is preferential 
(see Ml). 
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Proof: The result follows easily from Theorem We shall treat only two 
of the six properties, the reader will easily treat the other four properties. 
Consider Left Logical Equivalence. Assume that a is logically equivalent to 
a'. Then {a} = {a'} and C({a}) = C({a'}). Consider Or. Assume c G C({a}) 
and c G C({b}). Any x G /({a}) satisfies c. Any x G /({£>}) satisfies c. Any 
/ satisfying Contraction and Coherence, satisfies f(X U7) C f(X) U f(Y). 
Therefore any x G /({a}) U /({£>}) satisfies c and c G C(a V b). | 

Does the converse hold, i.e., may any preferential relation be obtained from 
such an operation C in such a way? The answer is yes. 

Theorem 9 Let |~ be any preferential relation. There is an operation C 
satisfying all the assumptions above such that a|~6 iff b G C({a}). 

Proof: This follows from the construction of Theorem 14 of fl3fl . The theo- 
rem claims that any finitary preferential operation (i.e., preferential relation) 
may be conservatively extended to an infinitary preferential operation C. The 
definition of C is the following: b G C(A) iff there exists some formula a such 
that A |= a (\= is logical implication of propositional calculus) enjoying the 
following property: for any a' such that A \= a' and a' \= a, one has a' 

The reader may check, with no need to use the theorem of ]TB[ and rela- 
tively easily, that C satisfies all the properties requested. For example, C is 
weakly compact. Assume C(A) = C. Then false G C(A) and there is some a 
such that A \= a and a|~false. But there is a finite subset B of A such that 
B (= a and B |~false. Therefore false G C(B). | 

10 Rational Monotonicity 

In this section, an important sub-family of nonmonotonic operations will 
be described. It corresponds, in the present setting, to the rational relations 
of ||22j| . The qualitative measures of Section [ih3| were partial orders. Measures 
(probability measures, for example) provide orders that obey an additional 
modularity property: 

(24) X >Y, X ^ Z ^ Z >Y. 

This seems a very natural property to require of a qualitative measure. As- 
sume for example that there is a function m : 2^ — ► R, the set of real 
numbers such that X > Y iff m(X) > m(Y), then, > is modular. 
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What is the property of choice functions that correspond to the modu- 
larity of a qualitative measure? 

Arrow X C Y, X n f(Y) ^ f(X) C /(F) 

This property is in fact only one half of the property studied by K. Arrow 
in M, assuming Contraction. The other half is Coherence. Note indeed that 
Arrow, Coherence and Contraction imply 

(25) X C Y, x n /(F) ^ =► /(X) = x n /(F), 

the property originally considered by K. Arrow. Indeed, by Coherence X H /(F) C 
/(X); by Arrow, f(X) C /(F); by contraction /(X) C X. 

The intuitive justification for Arrow is some kind of laziness principle for 
the choice function: if X C F and we have already a list of the best elements 
of F, we shall take for the best elements of X exactly those best elements of 
F that happen to be in X, at least whenever this new list is not empty. A 
remark will now show that there is a natural family of choice functions that 
satisfy Arrow. Suppose the elements of M. are ranked: our real estate agent, 
for example, gives a grade to every available apartment and, when asked 
about apartments in some area, delivers the list of all available apartments 
in this area that have the highest ranking. If the highest ranking in Paris is 10 
and one of those apartments graded 10 happens to be on the left bank, then 
all best apartments on the left bank have grade 10 and are therefore part of 
the list of best apartments in Paris. We shall now show that Modularity and 
Arrow are indeed exact counterparts. 

Theorem 10 If > satisfies properties and \2^, then, the choice function 
f defined by taking for /(X) the set of heavy elements (see Definition ^) 
of X satisfies Arrow. If f is a choice function that satisfies Contraction, 
Coherence, Local Monotonicity and Arrow, then, the relation > defined by: 
X > Y iff /(X) ^ and Y n f(X U F) = satisfies property ||. 

Proof: Assume > satisfies properties^ and |23|, and that X C F and x G X 
such that F ^ {x}. Let x' be any heavy element of X: X ^ {%'}■ If x 1 
was not heavy in F, we would have F > {x'} and, by [231, F > X and, by [|, 
F > {x}, a contradiction. Therefore any heavy element of X is a heavy 
element of F. 

Assume now that / satisfies Contraction, Coherence, Local Monotonicity 
and Arrow and that X > F. We shall show that either X > Z or Z > Y. We 
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know that f(X) ^ and Y n /(X U Y) = 0. We distinguish two cases. As- 
sume, first, that (YUZ)n f(X UFUZ)^. By Arrow, then, f(Y U Z) C 
/(X U K U Z). But, by Contraction and then Coherence 

/(IU7UZ) = /(X U Y u (z - y)) = 

(Auy)n/(xuyu(z-y))u(z-y)n/(xuyu(z-y)) c /(xuy)u(z-y). 

Therefore Yf]f(YUZ) = 0. If f(Z) ^ 0, then, we have Z>Y.\i f(Z) = 0, 
since, by Coherence, Z H /(A U Z) C /(Z), we have X > Z. 

We are left with the case (7UZ)n /(A U7UZ) = 0. By Contraction, 
/(XuyuZ)CXCXUZCXuyuZ. By Local Monotonicity, then, 
f (X U Z) C /(X U y U Z). Therefore Z n /(X U Z) = and we conclude 
that X > Z. | 

Having proved the equivalence of Modularity and Arrow, we shall prove 
equivalence Modularity and the property of Rational Monotonicity for the 
operation C. 

r 

Theorem 11 Suppose we are given a language £ and a function C : 2 — ► 2- 
Then, the following two conditions are equivalent: 

1. C satisfies Inclusion, Idempotence, Cautious Monotonicity, Conditional 
Monotonicity, Threshold Monotonicity and 

Rational Monotonicity C(C(A),B) ^ £ C(A) C C(A,B), 



2. there exists a set M. (of models), a satisfaction relation \= C M. x £ 
and a definability-preserving choice function f : A4 — > A4 satisfying 
Contraction, Coherence, Local Monotonicity and Arrow such that C(A) = 

Rational Monotonicity, introduced in |C1|, has been studied at length 



in |2^, |13[. Its intuitive justification is that, when the new information, 
contained in B, is consistent with what had been concluded from A, C(A), 
the new information will not force us to retract any previous conclusions, it 
may only add new conclusions. This is also a laziness principle. 
Proof: We shall describe only those parts of the proof that differ from that 
of Theorem For the soundness part: |2] implies [I], define C(A) as f{A) and 
assume Arrow. We must derive Rational Monotonicity. 
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Assume C(C(A), B) ^ C. On one hand we have Mod(A U B) C A and on 
the other hand we have /(Mod(C(A) U B)) ^ C. Therefore, f(Mod(C(A) U B)) 
and, by Contraction, Mod(C(A) U B) ^ 0, in other terms, C(A) n B ^ 0. 
Since / preserves definability: C(A) = f(A). We see that f(A) fl5/0 
and, by Contraction, f(A) n Mod(A U B) ^ 0. By Arrow, f(Mod(A U 5)) C 
f(A). Therefore C(A) C C(A,£). 

For the completeness part, we define as in the proof of Theorem |j. 
The properties of Cn proved there hold true. We must define M. slightly 
more carefully. We take for elements of M. only those sets T ^ £ such 
that T = Cn(T). The satisfaction relation is defined as previously: T \= a 
iff a G T. We see that, by construction, no element of M. satisfies all for- 
mulas of C and therefore X = C implies X = 0. We define / as previously. 
The proof that Equation [T3 holds is unchanged. Assuming Rational Mono- 
tonicity, we must show that Arrow holds. Assume IC7 and X n f{Y) ^ 0. 

We have X C Y and X n f(Y) = X DY D C(F) = X n C(F) ^ 0. There- 
fore X DC(Y) j£ 0. Let us define A = X and B = B. On one hand, we 
have A C £? and therefore Cn(B) C Cn(A) and on the other hand we have 
A n CCS) 7^ 0- Therefore Mod(A U C(B)) ^ 0. By the remark made at the 
start of this proof, when paying attention to exclude £ from the set Ai, 
we see that Mod(A U C(B)) ^ £. Therefore C(A,C(B)) ^ £. It is easy to 
show that C(A, C(B)) = C(Cn(A),C(Cn(B))). We may therefore use Rational 
Monotonicity to conclude that we have C(B) C C(A), i.e., C(F) C C(X) and 

C(X) C C(F). Therefore X n C(X~) C Y f] elf), i.e., f(X) C /(F). | 

We have shown that the additional property of Rational Monotonicity, stud- 
ied in the literature, corresponds exactly to an additional property of the 
choice function /. The family of nonmonotonic operations satisfying Ra- 
tional Monotonicity has different closure properties than the larger family 
studied in the preceding sections. In particular, it is not closed under inter- 
section. The reader will easily find a counter example. One such example is 



provided in [25 



11 Conclusion 

We have described two quite different but equivalent semantic frameworks: 
choice functions and qualitative measures, that provide an ontology for non- 
monotonic deduction. Choice functions have been studied by researchers in 
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Social Choice for their rationalizability properties, i.e., by what kind of ag- 
gregation mechanism can they arise from individual preferences? The equiv- 
alence we have shown with qualitative measures may be of interest to those 
researchers. The family of nonmonotonic operations defined in Section |] is 
precisely the family defined by choice functions or by qualitative measures, 
it is a natural generalization of Tarski's monotonic deductive operations. 
The operations of this family are closed under intersection. The classical 
connectives may be defined elegantly for this family of operations, by prop- 
erties that are weaker than those generally considered in the monotonic case. 
Only a very mild compactness assumption is needed. The sentential con- 
nectives may be defined by Introduction-Elimination rules. The connectives 
defined have a classical semantics. A further property of choice functions, 
considered by K. Arrow Q, is shown to be equivalent to the modularity 
(i.e., negative-transitivity) of the qualitative measure and the operations de- 
fined are characterized by the additional property of Rational Monotonicity 
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A large number of questions and alleys for future research are left open 
by this work. Let us mention a few, roughly from the small and technical to 
the vast and philosophical. 

The equivalence of Qualitative Measures and Choice functions semantics 
has been shown only under the Simplifying Assumption. A more general 
equivalence requires the introduction of a family of definable sets in the 
framework of Qualitative Measures and probably the introduction of some 
counterpart to Definability Preservation. 

Theorem |7| has been proved only under the assumption that P is finite. 
Does it hold without this restriction, and if not, does it hold without this 
restriction if one assumes C to be weakly compact? 

The framework of Choice Functions begs the semantic definition of non- 
classical, non-truth functional connectives. The study of such connectives 
(unary or, more probably, binary) in nonmonotonic logics seems particularly 
exciting. The preferred interpretation of the choice function suggests a link 
with deontic logics. 

This work sheds new light on properties studied by researchers in Social 
Choice. In particular new insights on the case of an infinite set of outcomes 
have been presented. Are they relevant to the Social Choice community? 

In||22||, a positive answer was given to a question that can now be seen 
as equivalent to: given a choice function that satisfies Contraction, Coher- 
ence and Local Monotonicity, is there a canonical way to restrict this choice 
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function in a way that ensures the Arrow property? This canonical con- 
struction, rational closure, offers a way to aggregate individual preferences 
into collective preferences that satisfy the Arrow property. This aggregation 
method does not satisfy Independence from Irrelevant Alternatives. Is it of 
any interest for Social Choice? 

This work uses Tarski's framework. Most proof-theoretic studies use 
Gentzen's framework. The translation of the results of this paper to the 
language of Gentzen's sequents may be illuminating. It seems one will have 
to consider sequents whose sides may be infinite sets of formulas. 
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